
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e7b1656-9dca-4b60-b060-78cba2d98191.cer
File: 3e7b1656-9dca-4b60-b060-78cba2d98191.cer (raw, json)
Hash identifier: FBGvm+eOwTu2RjsQLEGOBUNor7/APh9KX7TZhojPNz4=
Subject key identifier: 29:0C:29:73:62:40:86:54:29:F4:60:C6:EF:6C:F4:EB:65:B9:38:97
Authority key identifier: 8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
Certificate issuer: /CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Certificate serial: 010D0C9F4328584CD1EA9DFF088F9D4FE44F68EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
Manifest: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e7b1656-9dca-4b60-b060-78cba2d98191/3e7b1656-9dca-4b60-b060-78cba2d98191.mft
caRepository: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e7b1656-9dca-4b60-b060-78cba2d98191/
Notify URL: https://rrdp.arin.net/notification.xml
Certificate not before: Tue 10 Feb 2026 19:51:18 +0000
Certificate not after: Fri 12 May 2028 04:41:28 +0000
Subordinate resources: AS: 402178
IP: 23.153.116.0/24
IP: 2602:f469::/36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d1:ea:9d:ff:08:8f:9d:4f:e4:4f:68:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de027a1a-2695-4c0e-ae7d-e6cb10afa125
Validity
Not Before: Feb 10 19:51:18 2026 GMT
Not After : May 12 04:41:28 2028 GMT
Subject: CN=3e7b1656-9dca-4b60-b060-78cba2d98191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:dd:15:c4:d0:5d:82:80:16:01:43:77:8e:9e:
61:a1:60:fe:ee:e9:61:93:e9:7e:d9:a8:93:27:14:
6d:3e:09:d4:ff:26:7b:ad:f3:cb:2b:20:a6:cf:d6:
2a:6f:df:c6:87:66:f9:6c:3e:85:2a:dc:eb:9d:1a:
37:54:e4:0a:1b:c1:e8:e4:14:f3:34:56:2a:f0:e4:
12:f9:62:07:85:68:8c:9c:48:4b:a1:11:9f:88:e9:
63:21:30:4a:c6:3e:ba:6a:8d:44:aa:2e:4e:e8:fc:
41:62:12:41:64:a3:74:31:8d:9f:1b:8b:15:f2:f4:
90:32:53:e4:1c:0a:74:b5:95:a2:ed:41:af:f6:ef:
06:2d:4c:b9:a9:16:ab:9a:44:80:52:05:f1:88:71:
ad:f1:2f:c4:cb:b0:f3:2b:0c:71:90:89:c7:80:81:
62:6a:7e:b1:9e:f2:07:79:42:2e:c1:77:ae:04:e1:
72:5b:90:0c:32:69:eb:23:8a:af:5b:eb:38:e5:ee:
69:ba:1e:75:56:da:7a:e6:fb:46:86:8b:25:29:4a:
51:f9:ea:e1:81:aa:3c:bc:df:27:20:93:df:c0:d7:
68:05:a7:2b:a2:09:bf:53:f3:8a:16:0b:d5:fc:d0:
40:16:57:9a:42:4a:bc:80:ed:13:be:97:7d:3a:92:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0C:29:73:62:40:86:54:29:F4:60:C6:EF:6C:F4:EB:65:B9:38:97
Subject Information Access:
CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e7b1656-9dca-4b60-b060-78cba2d98191/
RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3e7b1656-9dca-4b60-b060-78cba2d98191/3e7b1656-9dca-4b60-b060-78cba2d98191.mft
RPKI Notify - URI:https://rrdp.arin.net/notification.xml
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
X509v3 Authority Key Identifier:
keyid:8F:EE:7C:97:19:91:54:AE:90:13:09:10:10:C9:1B:23:91:F4:F6:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
sbgp-ipAddrBlock: critical
IPv4:
23.153.116.0/24
IPv6:
2602:f469::/36
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
402178
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:2e:c2:04:f4:a8:95:97:04:b6:72:21:a2:d8:af:9c:b0:dd:
74:08:0b:7c:34:ac:bd:ea:f8:53:34:9b:54:e6:fe:43:ec:7a:
04:f9:1f:d1:95:29:6e:c3:82:db:e7:e7:cd:70:0b:db:0c:53:
a8:97:33:49:71:4e:29:7e:98:8e:a8:52:82:e7:2f:34:64:3b:
1b:5c:48:0b:a3:52:5a:01:41:75:ab:de:10:90:53:77:fb:69:
29:2e:83:e7:7f:b5:2a:77:86:1a:77:77:6e:b9:7e:9b:8b:5d:
b8:65:60:69:25:3e:49:a0:ad:cf:1e:59:f9:da:83:bf:02:c5:
3a:a5:54:b4:02:4a:39:06:5a:cf:58:04:a9:31:55:81:4f:53:
97:1c:2c:62:b4:92:5a:33:6f:f2:85:f6:bf:3a:51:ee:c4:b2:
ea:37:0f:e9:c6:e4:fc:a6:d9:7a:d8:0a:a8:02:93:96:92:5d:
df:1d:64:f8:83:98:ad:33:54:1b:69:e1:8a:f8:09:37:a4:4b:
81:94:9e:79:3f:2d:c8:43:43:89:0b:f5:22:a3:d6:21:31:05:
37:f8:85:5c:11:59:c6:8d:bb:1f:e7:69:61:85:03:42:c8:c0:
c0:9a:93:e7:99:45:d4:5a:a3:5e:2e:a3:29:ab:5f:98:85:73:
3d:55:82:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:20:57 2026 by rpki-client